X-Istence

Ceph RBD is plenty fast for having a database on... was able to get better performance than fibre channel or NFS to a NetApp using Ceph, ran some nice large Oracle instances on VM's on top of OpenStack backed by Ceph RBD.

Apple has had deprecated on the OpenSSL headers for a couple of releases now...

Movement on the scale does not necessarily equate with fat lost. In my case I have put in a lot of muscle mass in the mean time. I am lifting more, and have more stamina than ever before.

That's why I mentioned the pant sizes, because changing clothe sizing is a better indicator of things moving the right direction.

I haven't change my meal choices much at all, but getting the 30 minute work-out ring closed means I walk an average of 4 miles a day, every day (little over an hour). This also burns a bunch of calories, gets my aerobic exercise in, raises my heart rate, and gets me moving.

I keep a food log, and looking at the calories consumed before the Apple Watch and after they are very similar, the only real change has been the Apple Watch. Now that I get much more exercise in (it was simpler to ignore when I didn't have a watch with a watch face that shows me my rings), my nutritionist actually upped the amount of calories I need to eat a day.

Side note: Also, I have to keep my weight loss to a minimum due to losing weight too fast exacerbating other medical conditions. My doctor is happy with my progress, and that is what matters way more than some back of the envelope calculation you've done here.

The Apple watch and its health application which gamifies trying to close some rings has led to me losing 3 pant sizes (46 -> 40), and almost 40 lbs. I've put on a lot of extra muscle mass and spend a lot more time being healthy.

Is that worth $250? It absolutely is to me, and I wear it on a daily basis. The extra features are nice to have, I use Apple Pay on my watch quite a bit, and the notifications are nice to remind me of meetings.

You can get a /64 from many different providers for the cost of renting a single VPS from them...

Forcing owners of legacy /8's to give them up is hugely cost prohibitive for them. Various orgs with their own /8's might not announce them, but use them extensively internally.

Also, it wouldn't really help stave off the amount of IP's required, and we'd still be out in months.

My alma mater had just that. It was a course named "Ethics in Technology".

The description for the course:

"

TCH301 is designed to introduce students to essential concepts necessary to evaluate the ethical implications and potential impacts of the use of new technology within human society and culture. Students will explore modern ethical dilemmas in technology, looking at multiple aspects of how the introduction of technology redefines law and values.

"

From: http://majors.uat.edu/Tech-Studies/Pages/Core_Curriculum.asp...

It was and still is a required course to graduate with a degree from UAT.

Can we get file deletion in windows without raising an error because the file happens to be opened by some program?

I run as a non-administrator account, so this may be different if the user has administrator privileges.

But here is what happens:

1. I plug in the new device

2. Dialog box pops up letting me know a new network interface was detected (and to open network preferences to configure the device). The device does show up as en6, it is disabled and there is no network activity.

3. I can click Cancel or open Network Preferences

4. Click to open Network Preferences

5. I have to click the lock, and authenticate as an administrative user

6. I have to click the +

7. I have to select the new network interface by name from the drop-down

8. I have to click OK

9. I have to click Apply

At that point the network interface is brought "up", and it does a DHCP request, and I can use it.

So there are 8 steps to take AFTER plugging in the device before it can start siphoning off any and all of my data. It's not as plug and go as it is made out to be.

----

After adding a device, you can remove it from the list of devices in Network Preferences, and that resets that dialog box letting you know there is a new device.

On OS X when I plug in a new USB based Ethernet device, the first thing it does is pop up a dialog asking me if I want to enable/configure the device... is the device already configured at that time?

You can still install apps from anywhere. The hidden option allows you to bypass gatekeeper, which IMHO is a fantastic security feature that stops people from installing potential malware or unsigned binaries.

Apple has a guide to show you how to best wrap the cable without straining it...

i.e. Don't pull it tight. I still have power charges from my 2007 MacBook Pro that have not frayed and still look like new and with the adapter from MagSafe 1 to 2 still get used regularly.

> Mac pro basically disappeared with nothing to take its place.

It's still there, just hasn't really had a refresh. Have a feeling it is going to get killed due to not enough demand.

Even the original Mac Pro behemoth of a tower didn't really sell all that well.

> Mac mini as a very nice all in one device is neutered by lack of an optical drive.

Wat?

I have owned a Mac Mini since 2012 and not once have I said "Damn, I wish I had an optical drive".

I haven't touched optical media in years. I still have some DVD's and whatnot but they are all in boxes in storage (thanks for the reminder, need to drop em off at Goodwill).

What do you need an optical drive for?

> The super thin macbook 12" (whatever it is) can't have power and a usb device at the same time without some weirdo splitter dongle thing.

Yes, and for 99% of the target population this isn't a problem. I've had a couple of friends and family buy them, they charge the device overnight and use it during the day. Depending on how often they use it it gets charged maybe once or twice a week.

They don't use headphones with it, the device is used to check email, browse the web (facebook mostly) and that is about where it ends. Which is what the device is perfect for. No moving parts, nothing. Most of my friends also pair their bluetooth headphones to it if they are using it to watch movies. I blew one of my friends minds when I told him that it was USB so he could plug in his camera, instead he had been transferring pictures using Wifi (took a little longer, but he didn't mind).

> Oh, and the headphone jack thing.

Not a big fan of that one myself... kinda like my 3.5mm, but only because my preferred Bose headphones (QC20's) don't come in a bluetooth/lightning version yet. If they made a bluetooth version I'd be all over that asap.

The 2015 MacBook Pro still has fans... You'd have to go to a MacBook instead. Two very different laptops.

Wrong category:

http://www.freshports.org/net/openntpd/

It is currently marked as ignore, so packages are not built because it requires LibreSSL by default which means it will cause conflicts with stuff that uses OpenSSL.

On July 4th, this commit was added:

https://docs.freebsd.org/cgi/getmsg.cgi?fetch=395088+0+/usr/...

However I don't think this got merged to the quarterly branch until later, I rebuilt openntpd with OpenSSL on July 5th of this year.

This is a DNS re-bind attack.

There are already conflicts in the binary packages due to the OpenSSL/LibreSSL in ports...

Can't install openntpd and nginx at the same time :-(

What system are you thinking of? Which works with existing crypt(3) based system used on Unix?

Instead of using fd with a RNG, you should follow the RFC...

SixxS even runs a registry for ULA prefixes: https://www.sixxs.net/tools/grh/ula/

Put in your MAC address, get back a ULA. Then register it so that in the future if someone happens to have the same mac address you don't accidentally use the ULA.

I think it's normal to ship back a non-faulty product that I realised was the wrong one...

I've done it with expensive routers/switches from Cisco and SFP+'s from various vendors.

Never had any issues either. Cisco even cross-shipped the gear we wanted.

Although I think corporate account vs one-offs make the difference here ;-)

MachineZone shouldn't have put all of their eggs in a single basket. Multiple hosting providers, and write your server side so that failover can happen to other datacenters/locations almost instantly.

There are very few companies that are willing to purchase network gear from two different vendors and run two completely different network stacks.

Management would be a huge pain in the ass... but it would be doable.

Kind of reminds me of CAN BUS.

Had my bike stolen when I was in college. Still miss it, at the time the cops didn't give two shits.

My local Apple store has a bunch of older people working in the store. They are often just as knowledgeable as the younger kids running around, and have all kinds of cool stories to tell about how things "used to be done".

I actually prefer to work with one of the older people when making my purchase because I don't feel nearly as rushed and it seems to me to be a lot more personal...

Yes indeed!

100 GbE isn't that expensive. Transceivers for 100 GbE are in the $800 per port or so. CDW sells Proline 100 GbE transceivers for $300 a pop. It's a standard QSFP28 interface that is used for most of them. It carries 4x 25 GbE across the fibres.

They also make 100 GbE DAC cables.

Longer distances do cost more... Just looking around I found some 100GBASE-LR4 transceivers going for $6k a pop from Finisair... but at least you get to continue using your single mode fiber ;-)

There is only one local IPv6 address:

::1/128

Unlike IPv4 there is not an entire /8.

Unbound has that as a possibility in the recursive DNS resolver.

Super simple to set up too:

        # Enforce privacy of these addresses. Strips them away from answers.
        # It may cause DNSSEC validation to additionally mark it as bogus.
        # Protects against 'DNS Rebinding' (uses browser as network proxy).
        # Only 'private-domain' and 'local-data' names are allowed to have
        # these private addresses. No default.
        private-address: 10.0.0.0/8
        private-address: 172.16.0.0/12
        private-address: 192.168.0.0/16
        private-address: 169.254.0.0/16
        private-address: fd00::/8
        private-address: fe80::/10
        private-address: 127.0.0.0/8

Certain recursive resolvers, like unbound, have protections you can enable that disallow remote hosts to return private address space.

xip.io is one of those services that doesn't work on my home network because I have unbound block all RFC1918 space.

        # Enforce privacy of these addresses. Strips them away from answers.
        # It may cause DNSSEC validation to additionally mark it as bogus.
        # Protects against 'DNS Rebinding' (uses browser as network proxy).
        # Only 'private-domain' and 'local-data' names are allowed to have
        # these private addresses. No default.
        private-address: 10.0.0.0/8
        private-address: 172.16.0.0/12
        private-address: 192.168.0.0/16
        private-address: 169.254.0.0/16
        private-address: fd00::/8
        private-address: fe80::/10
        private-address: 127.0.0.0/8